This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1-7DW5GUb1HTBOmxbVG10pF_bdFI.roa File: 1-7DW5GUb1HTBOmxbVG10pF_bdFI.roa (raw, json) Hash identifier: d9p9MRB21h59qcmN668vKAnp4qulKJGW8Ns8GEmd3hs= Subject key identifier: FB:B0:D6:E4:65:1B:D4:74:C1:3A:6C:5B:54:6D:74:A4:5F:DB:74:52 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019AEA79087D0A9ABBB43CC67FD002AA9FAB Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1-7DW5GUb1HTBOmxbVG10pF_bdFI.roa Signing time: Thu 04 Dec 2025 17:46:31 +0000 ROA not before: Thu 04 Dec 2025 17:46:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 272869 IP address blocks: 45.81.124.0/24 maxlen: 24 45.81.126.0/24 maxlen: 24 185.244.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ea:79:08:7d:0a:9a:bb:b4:3c:c6:7f:d0:02:aa:9f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Dec 4 17:46:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fbb0d6e4651bd474c13a6c5b546d74a45fdb7452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a0:a9:9d:87:11:08:59:22:7b:a2:4e:fe:26: 12:7b:55:57:5d:92:51:e3:7b:1c:71:8c:35:c9:e4: 50:55:d4:b0:f3:f4:e7:1b:68:56:c3:59:bc:e1:d7: 93:5d:e3:a3:a3:cf:7a:ce:d2:16:ac:c8:77:6f:de: 86:27:03:0d:65:26:af:bf:08:0f:fe:97:49:26:f0: e4:36:d5:8c:db:7c:d1:90:d6:30:a1:e5:38:82:18: 73:e8:67:13:3e:7a:ad:f6:46:bf:98:36:52:d1:c4: cf:a6:03:fd:e5:c2:ce:8e:91:2a:98:84:81:e6:c3: 32:96:48:24:35:b4:da:21:f5:91:a2:0f:7e:a6:5d: fc:74:bc:3e:6c:1c:e4:43:83:fd:ed:c4:fd:d4:2a: 06:81:d2:54:8c:24:d0:14:55:28:47:9e:01:8c:5b: 26:e0:ca:fd:48:d3:15:4a:6c:83:54:67:a3:67:ae: 23:4a:53:c6:ce:47:6d:e8:7e:bb:6b:94:b0:28:3e: d6:d0:19:b2:3d:99:b8:eb:91:4a:f6:f7:fc:f1:11: 8e:a2:62:5a:b6:bb:db:ae:a5:8f:f2:2d:d6:3c:0c: dd:2c:3e:3b:23:e1:16:f1:56:51:d5:a2:05:92:f0: 72:e4:08:d3:b9:08:0d:81:e3:89:a9:6b:db:4e:a3: 52:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B0:D6:E4:65:1B:D4:74:C1:3A:6C:5B:54:6D:74:A4:5F:DB:74:52 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1-7DW5GUb1HTBOmxbVG10pF_bdFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.124.0/24 45.81.126.0/24 185.244.235.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:22:01:37:11:7c:30:d4:63:96:d7:b6:57:aa:f4:93:a4:cf: 56:44:3d:17:e6:fa:c7:7f:7a:5e:3d:52:2c:96:2e:6d:97:2e: 0b:a9:6e:3a:93:af:c5:61:43:87:29:86:eb:69:9e:86:80:89: e4:9c:18:23:60:5c:9b:0e:97:98:a9:24:63:df:da:8d:e9:59: 25:12:da:cf:07:46:dd:77:1b:e6:14:70:f1:58:10:16:1b:0d: 20:8f:3b:1c:6e:43:2c:5e:39:78:8f:51:4a:b3:e1:e8:2e:08: f6:d6:a0:d3:50:0c:43:bc:67:d5:cf:05:c9:73:84:04:c7:e6: 1b:25:3c:ce:21:62:54:f1:36:03:d8:c0:ca:0a:cb:57:2c:73: 41:14:3d:09:4a:96:9c:51:86:75:82:54:39:47:c6:55:38:ad: 81:fd:35:05:13:78:f7:d7:18:b3:d6:8c:91:1b:ed:36:e0:35: ba:62:c2:66:4b:d2:f5:67:3d:46:bc:b6:d6:0c:79:7f:8e:32: 4f:65:e0:01:ea:2b:08:26:8c:16:26:a5:54:a3:47:5b:23:6f: 11:02:63:37:a0:ff:52:1b:b5:3e:ec:53:4b:c0:da:7d:fa:f1: a5:35:1c:a4:15:07:81:3b:03:04:68:d9:5f:b4:1d:06:36:d2: 45:2a:4f:64 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZrqeQh9Cpq7tDzGf9ACqp+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjUxMjA0MTc0NjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmIwZDZlNDY1MWJkNDc0YzEzYTZjNWI1NDZkNzRhNDVmZGI3NDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KCpnYcRCFkie6JO/iYSe1VXXZJR 43sccYw1yeRQVdSw8/TnG2hWw1m84deTXeOjo896ztIWrMh3b96GJwMNZSavvwgP /pdJJvDkNtWM23zRkNYwoeU4ghhz6GcTPnqt9ka/mDZS0cTPpgP95cLOjpEqmISB 5sMylkgkNbTaIfWRog9+pl38dLw+bBzkQ4P97cT91CoGgdJUjCTQFFUoR54BjFsm 4Mr9SNMVSmyDVGejZ64jSlPGzkdt6H67a5SwKD7W0BmyPZm465FK9vf88RGOomJa trvbrqWP8i3WPAzdLD47I+EW8VZR1aIFkvBy5AjTuQgNgeOJqWvbTqNScwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFPuw1uRlG9R0wTpsW1RtdKRf23RSMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvMS03RFc1R1ViMUhUQk9teGJWRzEwcEZfYmRGSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWEvMGNjYmRhLWQ2ZjEtNDUyNy04MTA2LWNkN2UwNmNiYjUz MS8xL0JUVEVuOC1vcEZCQjJWN1UyTlQ4YWNjbnBHYy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAC1RfAME AC1RfgMEALn06zANBgkqhkiG9w0BAQsFAAOCAQEATSIBNxF8MNRjlte2V6r0k6TP VkQ9F+b6x396Xj1SLJYubZcuC6luOpOvxWFDhymG62mehoCJ5JwYI2Bcmw6XmKkk Y9/ajelZJRLazwdG3Xcb5hRw8VgQFhsNII87HG5DLF45eI9RSrPh6C4I9tag01AM Q7xn1c8FyXOEBMfmGyU8ziFiVPE2A9jAygrLVyxzQRQ9CUqWnFGGdYJUOUfGVTit gf01BRN499cYs9aMkRvtNuA1umLCZkvS9Wc9Rry21gx5f44yT2XgAeorCCaMFial VKNHWyNvEQJjN6D/Uhu1PuxTS8DaffrxpTUcpBUHgTsDBGjZX7QdBjbSRSpPZA== -----END CERTIFICATE-----Generated at Mon Dec 8 01:40:40 2025 by rpki-client